Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
File: y1eZ2NBfSgIAEdyoAxdivqASJV0.mft (raw, json)
Hash identifier: 89/5O8MdVpFVe45GTCwjPVUmW8wt+1UqDlwsaFMRc4g=
Subject key identifier: C8:21:D5:08:CD:A4:F7:40:B9:24:F0:1D:27:35:C8:1A:75:05:DB:F7
Authority key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
Certificate issuer: /CN=cb5799d8d05f4a020011dca8031762bea012255d
Certificate serial: 01974742D406014720A9381A888526D4F04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
Manifest number: 0AEE
Signing time: Fri 06 Jun 2025 22:00:51 +0000
Manifest this update: Fri 06 Jun 2025 22:00:51 +0000
Manifest next update: Sat 07 Jun 2025 22:00:51 +0000
Files and hashes: 1: CruS4RCbJ49Pu5Wwb_1XqSerrYI.roa (hash: Ko0xCKKscwZ3FBqqxABrJh1g8/pe6GJlkpoJ1sO6fuc=)
2: FXCR9Lc6KgRx_HPpZhjXnE6ILJY.roa (hash: TawwcEelbsmmDw/jX+MvcIQud2NnCnis9eNEGbrjubs=)
3: vGVdVq8hdcgYOOwvQpQi11D_qiw.roa (hash: iQlK6cWHkzaqE5q+G2UFXVrwyzgfQi2PnU7FDy9+VZI=)
4: y1eZ2NBfSgIAEdyoAxdivqASJV0.crl (hash: 0WrCkvW670DNAuq3XjMox4ggeNowwhy+2hQwbQqOVDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:d4:06:01:47:20:a9:38:1a:88:85:26:d4:f0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5799d8d05f4a020011dca8031762bea012255d
Validity
Not Before: Jun 6 22:00:51 2025 GMT
Not After : Jun 7 22:00:51 2025 GMT
Subject: CN=c821d508cda4f740b924f01d2735c81a7505dbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:d4:71:98:e9:11:cb:4f:5b:30:cb:13:d8:
41:ee:42:92:16:39:aa:df:47:e1:36:5f:e2:b3:77:
8a:af:ca:16:10:ce:71:ba:eb:46:7b:d5:e7:1c:92:
cd:4e:0c:68:97:2e:3c:6d:3a:43:82:ac:81:1f:c5:
59:3b:da:b8:3d:a3:9a:af:a0:45:3a:62:ad:f9:98:
d5:7b:2c:4b:e7:cc:bd:73:1a:ea:7b:3f:33:23:8d:
2e:1b:29:16:e6:12:12:85:c3:45:47:ee:07:6f:31:
b5:a8:1b:95:e8:cf:1f:77:bc:02:fd:2a:01:08:c1:
ff:fa:a5:68:21:69:08:86:cc:ec:71:56:8d:09:d6:
86:07:56:14:52:89:64:f3:11:e1:a7:38:7b:35:e1:
ca:a9:b4:10:ce:cf:70:05:69:18:c4:e4:9a:73:05:
56:8b:f5:a7:82:6d:e0:fa:c5:90:f5:95:f4:fc:84:
e0:3b:cf:c8:01:e7:a0:3b:55:80:f0:58:99:ce:a1:
c1:23:70:7f:fb:0c:3f:60:7b:79:88:c3:04:a0:d8:
a8:dd:69:23:ce:6e:c3:cb:d8:33:55:e4:44:78:32:
f1:d8:b0:0c:30:07:fc:8f:73:ae:14:6d:c2:7d:d7:
f2:af:f6:72:24:1c:a1:5e:14:6c:f8:d0:16:61:15:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:21:D5:08:CD:A4:F7:40:B9:24:F0:1D:27:35:C8:1A:75:05:DB:F7
X509v3 Authority Key Identifier:
keyid:CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4f:37:17:d1:b3:e7:bc:92:4f:76:e6:36:ac:56:9b:13:01:
4d:f1:e7:56:42:ff:93:5f:3e:ca:fb:93:19:1d:21:11:8e:01:
4b:32:3b:a7:ee:be:67:4c:23:87:01:1b:98:0a:01:dd:2b:79:
34:a9:7c:fc:df:1b:40:62:df:e1:5c:a3:19:11:84:7f:52:af:
1b:7e:69:ca:dd:c4:06:ec:7b:19:0e:d9:d7:b1:33:94:00:77:
03:8b:32:b9:4e:ef:1b:2d:0c:38:12:ba:46:ac:5b:32:6f:01:
fb:15:e5:81:ac:47:dd:60:28:4a:d4:da:e9:70:20:09:ac:ea:
fd:e4:dd:4e:df:a3:32:b6:0e:11:b4:d3:a4:1f:b2:fb:6a:b7:
a7:73:a6:a7:5b:41:cb:9f:66:04:fc:46:09:d4:af:db:64:23:
fc:8d:8f:6a:3f:a2:e0:12:ae:ae:78:7d:b1:a7:b8:7c:1d:77:
dc:e5:db:67:cd:3b:5a:9c:d9:fe:51:3a:25:85:70:35:37:bc:
29:aa:f6:a9:52:26:aa:0b:0f:f4:83:1b:15:93:bc:70:c2:49:
d3:a1:5d:cd:d5:68:99:dc:b5:2c:da:a4:32:7e:b5:c5:dc:db:
f2:0d:fe:90:6f:c5:f9:93:b4:e9:35:a5:ed:c6:53:f8:44:aa:
a9:b4:22:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:40 2025 by rpki-client